From fbb4ade7f667fe21147d4ee90d0c4551c5ff5ab2 Mon Sep 17 00:00:00 2001
From: ernolf <raphael.gradenwitz@googlemail.com>
Date: Fri, 17 Jul 2026 20:43:53 +0200
Subject: [PATCH] ci: add the ncmake release workflow that replaced
 release-asset.yml

- the previous commit removed release-asset.yml but the replacement release.yml was not committed
- also drop the stale release-asset.yml reference from REUSE.toml

Signed-off-by: ernolf <raphael.gradenwitz@googlemail.com>
---
 .github/workflows/release.yml | 51 +++++++++++++++++++++++++++++++++++
 REUSE.toml                    |  2 +-
 2 files changed, 52 insertions(+), 1 deletion(-)
 create mode 100644 .github/workflows/release.yml

diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
new file mode 100644
index 0000000..c6585b9
--- /dev/null
+++ b/.github/workflows/release.yml
@@ -0,0 +1,51 @@
+# SPDX-FileCopyrightText: 2026 [ernolf] Raphael Gradenwitz <raphael.gradenwitz@googlemail.com>
+# SPDX-License-Identifier: AGPL-3.0-or-later
+
+name: Release tarball
+
+# Builds the install tarball (pure PHP app, no runtime dependencies, no build
+# step) and, when a release is published, attaches it as a release asset.
+# workflow_dispatch produces a downloadable artifact for testing without
+# publishing a release. No secrets, no App Store upload: the store later only
+# receives the download URL and a signature.
+
+on:
+  release:
+    types: [published]
+  workflow_dispatch:
+
+permissions:
+  contents: write
+
+jobs:
+  tarball:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v7
+        with:
+          persist-credentials: false
+
+      - name: Assemble runtime tree
+        run: |
+          mkdir -p package/admin_audit_http_client
+          cp -r appinfo lib LICENSES CHANGELOG.md REUSE.toml package/admin_audit_http_client/
+
+      - name: Create tarball
+        run: |
+          version=$(grep -oPm1 '(?<=<version>)[^<]+' appinfo/info.xml)
+          tarball="admin_audit_http_client-${version}.tar.gz"
+          tar -C package -czf "$tarball" admin_audit_http_client
+          echo "TARBALL=$tarball" >> "$GITHUB_ENV"
+
+      - name: Upload build artifact
+        uses: actions/upload-artifact@v7
+        with:
+          name: admin_audit_http_client-tarball
+          path: ${{ env.TARBALL }}
+
+      - name: Attach to release
+        if: github.event_name == 'release'
+        run: gh release upload "${GITHUB_REF_NAME}" "${TARBALL}" --clobber
+        env:
+          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
diff --git a/REUSE.toml b/REUSE.toml
index 9929a13..f191ce2 100644
--- a/REUSE.toml
+++ b/REUSE.toml
@@ -12,7 +12,7 @@ SPDX-FileCopyrightText = "2026 [ernolf] Raphael Gradenwitz"
 SPDX-License-Identifier = "AGPL-3.0-or-later"
 
 [[annotations]]
-path = [".github/FUNDING.yml", ".github/workflows/release-asset.yml"]
+path = [".github/FUNDING.yml"]
 precedence = "aggregate"
 SPDX-FileCopyrightText = "2026 [ernolf] Raphael Gradenwitz"
 SPDX-License-Identifier = "AGPL-3.0-or-later"